Method and system for simplifying protocol analysis

ABSTRACT

A system and method in accordance with exemplary embodiments may include receiving, from a user system, one or more protocol analysis request messages via a network, transmitting, to one or more multipurpose interface devices, one or more control signals based on the one or more protocol analysis request messages, receiving, from the one or more multipurpose interface devices, protocol analysis data associated with data traffic transmitted on one or more test networks in response to the transmitted control signals, and outputting, to the user system, the protocol analysis data via the network.

BACKGROUND INFORMATION

A network may include numerous nodes that are physically separated bysubstantial amounts of land. In many instances, testing such a network(e.g., performing protocol analysis) may require multiple technicians touse various electronic devices to coordinate the capture of a specificnetwork event, such as, data traffic flowing on the numerous nodes.Often times, however, these electronic devices utilize graphical userinterfaces that are cryptic and are not user friendly. Such crypticinterfaces may increase the difficulty for the multiple technicians tocapture the specific network event. In addition, coordinating themultiple technicians to capture at approximately the same time may beoverly burdensome.

BRIEF DESCRIPTION OF THE DRAWINGS

Purposes and advantages of the exemplary embodiments will be apparent tothose of ordinary skill in the art from the following detaileddescription in conjunction with the appended drawings in which likereference characters are used to indicate like elements, and in which:

FIG. 1 illustrates a block diagram of a simplified protocol analysisnetwork, in accordance with exemplary embodiments;

FIG. 2 illustrates an exemplary screen shot of a protocol analysisconfiguration menu graphical user interface, in accordance withexemplary embodiments;

FIG. 3 illustrates an exemplary screen shot of a network interfaceconfiguration graphical user interface, in accordance with exemplaryembodiments;

FIG. 4 illustrates an exemplary screen shot of a capture file nameconfiguration graphical user interface, in accordance with exemplaryembodiments;

FIG. 5 illustrates an exemplary screen shot of a filter configurationgraphical user interface, in accordance with exemplary embodiments;

FIG. 6 illustrates an exemplary screen shot of a screen displaygraphical user interface, in accordance with exemplary embodiments;

FIG. 7 illustrates an exemplary screen shot of a report graphical userinterface, in accordance with exemplary embodiments;

FIG. 8 illustrates an exemplary screen shot of an archived reports andcapture files graphical user interface, in accordance with exemplaryembodiments;

FIG. 9 illustrates a flowchart of a method for simplifying protocolanalysis at a protocol analysis controller device, in accordance withexemplary embodiments; and

FIG. 10 illustrates a flowchart of a method for simplifying protocolanalysis at a multipurpose interface device, in accordance withexemplary embodiments.

These and other embodiments and advantages will become apparent from thefollowing detailed description, taken in conjunction with theaccompanying drawings, illustrating by way of example the principles ofthe various exemplary embodiments.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

The description below describes physical and logical elements of anetwork, some of which are explicitly shown in figures, others that arenot. The inclusion of some physical elements of a network system mayhelp illustrate how a given network may be modeled. It should be noted,however, that all illustrations are purely exemplary and that thenetwork scheme described herein may be performed on different varietiesof networks which may include different physical and logical elements.

For instance, the simplified protocol analysis network 100 from FIG. 1illustrates a simplified view of a passive optical network and variouselements in the passive optical network. It is noted that other hardwareand software not depicted may be included in network 100. It is alsonoted that network 100 illustrates a specific number of instances ofuser systems, intra networks, firewalls, servers, remote storage areanetworks (SANs), databases, data networks, protocol analysis controllerdevices, multipurpose interface devices, and/or test networks. It willbe appreciated that a single instance and/or multiple instances of theseentities may be included in a network.

It is further noted that the software described herein may be tangiblyembodied in one or more physical media, such as, but not limited to, acompact disc (CD), a digital versatile disc (DVD), a floppy disk, a harddrive, read only memory (ROM), random access memory (RAM), as well asother physical media capable of storing software, and/or combinationsthereof. Moreover, the figures illustrate various components (e.g., usersystems, firewalls, servers, remote SANs, databases, protocol analysiscontroller devices, and multipurpose interface devices, etc.)separately. The functions described as being performed at variouscomponents may be performed at other components, and the variouscomponents may be combined and/or separated. Other modifications alsomay be made.

In an exemplary embodiment, data traffic transmitted through a passiveoptical network (PON) may be analyzed using one or more remotelycontrolled multipurpose interface devices. In various embodiments, datatraffic may include one or more data packets that carry videoinformation, audio information, and/or any other type of information inelectronic form. In various embodiments, a multipurpose interface devicemay include any software and/or hardware configured to operate as aprotocol analyzer and/or perform protocol analysis functions. Forexample, multipurpose interface device may include one or more packetsniffers, one or more network sniffers, one or more network analyzers,one or more Ethernet sniffers, one or more wireless sniffers, and/or anyother software and/or hardware that may be used to perform protocolanalysis functions. The one or more multipurpose interface devices maybe placed at various physical locations within the PON, such as, atvarious nodes. Accordingly, the one or more multipurpose interfacedevices may be controlled and/or managed by one or more protocolanalysis controller devices.

In an exemplary embodiment, one or more protocol analysis controllerdevices may be communicatively coupled to the PON and one or moremultipurpose interface devices such that one or more protocol analysiscontroller devices may communicate signals to and receive signals fromthe one or more multipurpose interface devices. Based on one or moresignals received from one or more protocol analysis controller devices,one or more multipurpose interface devices may intercept one or moredata packets transmitted on the PON, filter one or more data packetstransmitted on the PON, and/or transmit protocol analysis dataassociated with one or more data packets transmitted on the PON to oneor more protocol analysis controller devices.

In an exemplary embodiment, one or more protocol analysis controllerdevices may receive protocol analysis request information from one ormore user systems communicatively coupled to the PON. Protocol analysisrequest information may include any information that is needed tospecify the type of protocol analysis data desired.

In an exemplary embodiment, one or more protocol analysis controllerdevices may transmit one or more signals to one or more multipurposeinterface devices based on the received protocol analysis requestinformation. In an exemplary embodiment, one or more protocol analysiscontroller devices may transmit protocol analysis data received from oneor more multipurpose interface devices to one or more storage mediumsand/or one or more user systems.

FIG. 1 illustrates a block diagram of a simplified protocol analysisnetwork 100 in accordance with exemplary embodiments. The simplifiedprotocol analysis network 100 may include a user side 146 and/or aprotocol analysis side 144. In an exemplary embodiment, the user side146 of the simplified protocol analysis network 100 may include one ormore user systems 122, one or more intra-networks 120, and/or one ormore firewalls 118. In an exemplary embodiment, the protocol analysisside 144 of the simplified protocol analysis network 100 may include oneor more servers 102, one or more data networks 108, one or more storagearea networks (SANs) 106, one or more databases 104, one or moreprotocol analysis controller devices 110, one or more multipurposeinterface devices 112A-112N, and/or one or more test networks 114.

The simplified protocol analysis network 100 may be in communicationwith the intra-network 120, the data network 108, and/or the testnetwork 114. The intra-network 120, the data network 108, and/or thetest network 114 may include one or more of a local area networks(LANs), one or more wide area networks (WANs), the Internet, one or morecellular networks, one or more satellite networks, one or more passiveoptical network (PONs) and/or any other networks that permit thetransfer and/or reception of data. The intra-network 120, the datanetwork 108, and/or the test network 114 may utilize one or moreprotocols of network clients. The intra-network 120, the data network108, and/or the test network 114 may also translate to or from otherprotocols to one or more protocols of network clients. In exemplaryembodiments, the intra-network 120, the data network 108, and/or thetest network 114 may include one or more of the exemplary networksrecited above operating as a stand-alone network or in cooperation witheach other. Use of the term network herein is not intended to limit thenetwork to a single network.

User system 122 may be in communication with or have access to one ormore data networks 108 and/or one or more test networks 114 usingintra-network 120. For example, user system 122 and the remainder of thesimplified protocol analysis network 100 may communicate with each otherusing one or more of the networks described above.

User system 122 may include, but is not limited to, a computer device orcommunications device including, e.g., a personal computer (PC), aworkstation, a mobile device, a handheld PC, a personal digitalassistant (PDA), a thin system, a fat system, a network appliance, anInternet browser, a server, a lap top device, and/or any other devicethat is configured to receive protocol analysis data signals from one ormore protocol analysis controller devices 110 or one or moremultipurpose interface devices 112 and/or transmit protocol analysisrequest signals to one or more protocol analysis controller devices 110using the intra-network 120 and/or the data network 108. Protocolanalysis data signals may include protocol analysis data, such as,network protocol header information, network protocol trailerinformation, and/or data/information encapsulated by one or more networkprotocols. Protocol analysis request signals may include protocolanalysis request information.

User system 122 may include software and/or hardware configured totransmit one or more protocol analysis request signals to one or moreprotocol analysis controller devices 110 via data path 124. One or moreprotocol analysis request signals may be determined based on datainputted by a user using one or more graphical user interfaces displayedat the user system 122. For example, the user system 122 may display aprotocol analysis configuration menu graphical user interface 200 asillustrated in FIG. 2, a network interface configuration graphical userinterface 300 as illustrated in FIG. 3, a capture file nameconfiguration graphical user interface 400 as illustrated in FIG. 4,and/or a filter configuration graphical user interface 500 asillustrated in FIG. 5. The graphical user interfaces illustrated in FIG.2, FIG. 3, FIG. 4, and FIG. 5 are described in greater detail below.

User system 122 may include software and/or hardware configured toreceive one or more protocol analysis data signals from one or moreprotocol analysis controller devices 110 or one or more multipurposeinterface devices 112 via data path 124. In various embodiments, one ormore display devices associated with the user system 122 may beconfigured to output (e.g., display) the protocol analysis dataassociated with the one or more protocol analysis data signals to theuser.

In various embodiments, the user system 122 may be communicativelycoupled to the intra-network 120 via data path 124. In variousembodiments, the intra-network may be communicatively coupled to thefirewall 118 via data path 126.

Given that protocol analysis data may be considered confidentialinformation by the implementers of the simplified protocol analysisnetwork 100, a firewall (e.g., the firewall 118) may be configured tooperate as a barrier between unwanted intruders and the protocolanalysis data generated by and/or stored in one or more network elementsassociated with the simplified protocol analysis network 100.Accordingly, the firewall 118 may include software and/or hardwareconfigured to only allow access to authorized users using one or moreauthentication measures, such as, passwords, user names, securityquestions, finger print scanners, retina scanners, voice identifiers,and/or any other information that may be used to identify a user'sidentity. In various embodiments, the firewall I 18 may be configured toreceive data from and/or transmit data to the user side 146 of thesimplified protocol analysis network 100 via data path 126. For example,the firewall 118 may be configured to receive authentication informationand/or one or more protocol analysis request signals from the usersystem 122 via data path 126. In another example, the firewall 118 maybe configured to transmit one or more protocol analysis data signals tothe user system 122 via data path 126. In various embodiments, thefirewall 118 may be configured to receive data from and/or transmit datato the protocol analysis side 144 of the simplified protocol analysisnetwork 100 via data path 128. For example, the firewall 118 may beconfigured to receive one or more protocol analysis data signals fromthe server 102 via data path 128. In another example, the firewall 118may be configured to transmit one or more protocol analysis requestsignals to the server 102 via data path 128. In various embodiments, thesimplified protocol analysis network 100 may be implemented without afirewall 118.

The server 102 may include software and/or hardware configured to allowuser access (e.g., web access, command line, client-server graphicaluser interface (GUI) to the remote SAN 106, the protocol analysiscontroller device 110, the database 104, and/or the data network 108 viadata path 130. In various embodiments, the server 102 may include one ormore web proxies. In various embodiments, the server 102 may include oneor more middleware applications. Middleware applications may includesoftware configured to gather protocol analysis data from one or morenetwork elements, such as, the database 104, the remote SAN 106, and/orthe protocol analysis controller device 110, and compile the gatheredprotocol analysis data to create one or more trouble tickets. In variousembodiments, a trouble ticket may include protocol analysis data to beanalyzed and/or reviewed. For example, a trouble ticket may include aninformation medium in which the existence of abnormal and/or unexpectedprotocol analysis data may be transferred to one or more entities thatoperate to manage one or more protocol analysis functions.

In various embodiments, the server 102 may be configured to transmit oneor more protocol analysis data signals to the firewall 118 via data path128. In various embodiments, the server 102 may be configured totransmit one or more protocol analysis request signals to the datanetwork 108 via data path 130.

The protocol analysis controller device 110 may include software and/orhardware configured to receive one or more protocol analysis requestsignals from the data network 108 via data path 136. In variousembodiments, one or more protocol analysis request signals may beassociated with protocol analysis request information. Protocol analysisrequest information may include network interface information, capturefile name information, filter information, screen display information,report generation information, report transmittal information, archiveinformation, and/or any other information that is needed to perform oneor more protocol analysis functions. In various embodiments, networkinterface information may include one or more network interfaceparameters that indicate each requested interface (e.g., twisted pair,fiber optic, coax) to be analyzed, the mode (e.g., standard,promiscuous) of each requested interface to be analyzed, and/or eachrequested node associated with a multipurpose interface device 112 to beanalyzed. In various embodiments, capture file name information mayinclude one or more capture file name parameters that indicate the nameof the file in which the captured protocol analysis data is requested tobe stored. In various embodiments, filter information may include one ormore filter parameters that indicate the requested layers of datatraffic to be analyzed, one or more requested time frames during whichprotocol analysis is to occur, one or more specific events associatedwith the PON requested to be captured, and/or the requested capture filename storing the protocol analysis data to be filtered.

The protocol analysis controller device 110 may include software and/orhardware configured to process one or more protocol analysis requestsignals to determine one or more control signals for one or moremultipurpose interface devices 112. A control signal may includeelectronic information that controls and/or manages one or more protocolanalysis functions performed by one or more multipurpose interfacedevices 112. For example, the protocol analysis controller device 110may receive one or more protocol analysis request signals requestingprotocol analysis data for the Ethernet interface of multipurposeinterface device 112A and the Ethernet interface multipurpose interfacedevice 112B between 4 pm and 5 pm of a particular day. Accordingly, theprotocol analysis controller device 110 may process the one or moreprotocol analysis request signals and determine/transmit one or morecontrol signals initializing the capture of the appropriate data trafficat the appropriate time. In various embodiments, the protocol analysiscontroller device 110 may be configured to transmit one or more controlsignals to the multipurpose interface device 112A via data path 140A,transmit one or more control signals to the multipurpose interfacedevice 112B via data path 140B, and/or transmit one or more controlsignals to the multipurpose interface device 112N via data path 140N.

In an exemplary embodiment, one or more control signals may indicatewhere the multipurpose interface device 112 should transmit the protocolanalysis data. For example, during live captures (e.g., capturing datatraffic and displaying protocol analysis data with negligible delay),the protocol analysis controller device 110 may transmit one or morecontrol signals that instruct one or more multipurpose interface devices112 to transmit the protocol analysis data to the user system 122 fordisplay. During non-live captures, the protocol analysis controllerdevice 110 may transmit one or more control signals that instruct one ormore multipurpose interface devices to transmit the protocol analysisdata to one or more storage mediums, such as, a remote SAN 106, adatabase 104, and/or a local storage media (not shown) located withinand/or communicatively coupled to the protocol analysis controllerdevice 110.

The multipurpose interface device 112 may be communicatively coupled toone or more test networks, such as test network 114, via data path 142.In various embodiments, a multipurpose interface device 112 may includeany software and/or hardware configured to operate as a protocolanalyzer and/or perform protocol analysis functions. For example, themultipurpose interface device 112 may include one or more packetsniffers, one or more network sniffers, one or more network analyzers,one or more Ethernet sniffers, one or more wireless sniffers, and/or anyother software and/or hardware that may be used to perform protocolanalysis functions. In various embodiments, the multipurpose interfacedevice 112 may include software and/or hardware configured to capturedata traffic transmitted on the test network 114 based on one or morecontrol signals. In various embodiments, the multipurpose interfacedevice 112 may include software and/or hardware configured to processthe captured data traffic into protocol analysis data.

In an exemplary embodiment, the multipurpose interface device 112 may beconfigured to apply one or more parameters based on one or more receivedcontrol signals after capturing the data traffic from the test network114. For example, the multipurpose interface device 112 may capture thedata traffic transmitted through a particular node of the test network114 and may apply the one or more parameters to the captured datatraffic to delete (e.g., filter) non-requested data once the capture iscomplete. In an exemplary embodiment, the multipurpose interface device112 may be configured to apply one or more parameters based on one ormore received control signals during the capture of the data trafficfrom the test network 114. For example, the multipurpose interfacedevice 112 may apply the one or more parameters to the data traffic asthe data traffic is being captured such that only the requested data isused to process the protocol analysis data. In an exemplary embodiment,multipurpose interface device 112A may be configured to capture datatraffic transmitted on the test network 114 via data path 142A,multipurpose interface device 112B may be configured to capture datatraffic transmitted on the test network 114 via data path 142B, andmultipurpose interface device 112N may be configured to capture datatraffic transmitted on the test network 114 via data path 142N.

In an exemplary embodiment, the remote SAN 106 may be communicativelycoupled to the data network 108 via data path 134. In variousembodiments, the remote SAN 106 may include software and/or hardwareconfigured to store and/or allow user access to protocol analysis datastored in various formats. For example, the remote SAN 106 may storeprotocol analysis data in a network capture format (e.g., “.cap”format). In various embodiments, the remote SAN 106 may store multiplearchived captures (e.g., previously provided captures) and may processthe archive captures to determine one or more baselines for futurecapture comparisons.

In an exemplary embodiment, the database 104 may be communicativelycoupled to the data network 108 via data path 132. In variousembodiments, the database 104 may include software and/or hardwareconfigured to store and/or allow user access to protocol analysis datastored in various formats. For example, the database 104 may storeprotocol analysis data in a /spread sheet format (e.g., “.xls” format).In another example, the database 104 may store protocol analysis data ina comma-separated values format (e.g., “.csv” format). In yet anotherexample, the database 104 may store protocol analysis data in a tupleformat. In various embodiments, the database 104 may store multiplearchived captures (e.g., previously provided captures) and may processthe archive captures to determine one or more baselines for futurecapture comparisons.

In an exemplary embodiment, the database 104 may be configured tosupport data queries and/or modification of data by a user system 122.Accordingly, the database 104 may perform various SQL-typefunctionalities using one or more database applications (e.g., MySQL,PostgresSQL, Oracle).

In an exemplary embodiment, the local storage media (not shown) mayinclude a local hard-drive, USB drive, Compact flash, Memory stick,external hard-drive, and/or any other optical storage media. In anexemplary embodiment, the local storage media associated with theprotocol analysis controller device 110 may include software and/orhardware configured to store and/or allow user access to protocolanalysis data stored in various formats. For example, the local storagemedia may store protocol analysis data in a network capture format(e.g., cap format).

The storage mediums described above (e.g., the remote SAN 106, thedatabase 104, the local storage media (not shown)) may be configured toapply one or more protocol analysis request parameters to the storedprotocol analysis data. For example, the storage mediums may apply oneor more filter parameters to the stored protocol analysis data.

FIG. 2 illustrates an exemplary screen shot of a protocol analysisconfiguration menu graphical user interface 200, in accordance withexemplary embodiments. In an exemplary embodiment, the protocol analysisconfiguration menu graphical user interface 200 may be arranged asdepicted in FIG. 2. The protocol analysis configuration menu graphicaluser interface 200 may display to a user one or more hyperlinks coupledto one or more protocol analysis graphical user interfaces. For example,protocol analysis configuration menu graphical user interface 200 maydisplay a network interface configuration hyperlink, a capture file nameconfiguration hyperlink, a filter configuration hyperlink, a screendisplay hyperlink, a report generation hyperlink, a report transmittalhyperlink, and/or an archived reports and capture files hyperlink to theuser. In various embodiments, the user may access one or more of theprotocol analysis graphical user interfaces to input protocol analysisrequest information.

In an exemplary embodiment, a user may activate (e.g., click on) ahyperlink using an input device (e.g., a mouse). For example, the usermay activate the network interface configuration hyperlink toaccess/view the network interface configuration graphical user interface300 illustrated in FIG. 3. In another example, the user may activate thecapture file name configuration hyperlink to access/view the capturefile name configuration graphical user interface 400 illustrated in FIG.4. In yet another example, the user may activate the filterconfiguration hyperlink to access/view the filter configurationgraphical user interface 500 illustrated in FIG. 5.

In various embodiments, the user may activate one or more hyperlinks toaccess/view one or more graphical user interfaces for administrativepurposes. For example, the user may activate the screen displayhyperlink to access/view a screen display graphical user interface 600illustrated in FIG. 6. In another example, the user may activate thereport generation hyperlink and/or the report transmittal hyperlink toaccess/view one or more report graphical user interfaces 700 illustratedin FIG. 7. In yet another example, the user may activate the archivedreports and capture files hyperlink to access/view an archived reportsand capture files graphical user interface 800 illustrated in FIG. 8.

FIG. 3 illustrates an exemplary screen shot of a network interfaceconfiguration graphical user interface 300, in accordance with exemplaryembodiments. In an exemplary embodiment, the network interfaceconfiguration graphical user interface 300 may be arranged as depictedin FIG. 3. The network interface configuration graphical user interface300 may display to a user one or more network communication interfaces(e.g., End Point Interface 1, End Point Interface 2, End Point Interface3, End Point Interface 4) associated with one or more multipurposeinterface devices 112 and one or more network interface configurationparameters. For example, a network communication interface may use anyconnection interface that may be used to access data traffic, such as₇twisted pair, fiber optic, and/or coax and may be associated with anycommunication protocol (e.g., Asynchronous Transfer Mode (ATM),Ethernet, Sonet/SDH).

In an exemplary embodiment, a network interface configuration parametermay include a multipurpose interface device selection parameter and/or amultipurpose interface device mode parameter. In various embodiments, amultipurpose interface device 112 may operate in one or more modes. Forexample, the multipurpose interface device 112 may operate in a standardmode and/or in a promiscuous mode. In standard mode, the multipurposeinterface device 112 may have an Internet Protocol (IP) address that ispart of the subnet of the test network 114 to enable thecapture/intercept of data traffic transmitted on the test network 114.In promiscuous mode, the multipurpose interface device 112 may have anyIP address or no IP address to enable the capture/intercept of datatraffic transmitted on the test network 114.

In an exemplary embodiment, the user may activate/select one or moremultipurpose interface devices 112 and/or a multipurpose interfacedevice mode for each activated/selected multipurpose interface device112 using an input device (e.g., a mouse). For example, the networkinterface configuration graphical user interface 300 may display amultipurpose interface device selection drop down menu and/or amultipurpose interface device mode drop down menu associated with theEnd Point Interface 1. In another example, the network interfaceconfiguration graphical user interface 300 may display a multipurposeinterface device selection drop down menu and/or a multipurposeinterface device mode drop down menu associated with the End PointInterface 2. In another example, the network interface configurationgraphical user interface 300 may display a multipurpose interface deviceselection drop down menu and/or a multipurpose interface device modedrop down menu associated with the End Point Interface 3. In yet anotherexample, the network interface configuration graphical user interface300 may display a multipurpose interface device selection drop down menuand/or a multipurpose interface device mode drop down menu associatedwith the End Point Interface 4. In an exemplary embodiment, the user mayinput one or more network interface configuration parameters using thenetwork interface configuration graphical user interface 300. Forexample, the user may input one or more network interface configurationparameters by activating (e.g., clicking on) the “Submit InterfaceParameters” button using an input device.

FIG. 4 illustrates an exemplary screen shot of a capture file nameconfiguration graphical user interface 400, in accordance with exemplaryembodiments. In an exemplary embodiment, the capture file nameconfiguration graphical user interface 400 may be arranged as depictedin FIG. 4. The capture file name configuration graphical user interface400 may display to a user one or more capture file name data fieldsassociated with one or more network communication interfaces. In variousembodiments, the user may input a name of a file in which the capturedand/or processed protocol analysis data is to be stored.

For example, the capture file name configuration graphical userinterface 400 may display a capture file name data field associated withEnd Point Interface 1. In another example, the capture file nameconfiguration graphical user interface 400 may display a capture filename data field associated with End Point Interface 2. In anotherexample, the capture file name configuration graphical user interface400 may display a capture file name data field associated with End PointInterface 3. In yet another example, the capture file name configurationgraphical user interface 400 may display a capture file name data fieldassociated with End Point Interface 4. In an exemplary embodiment, theuser may input one or more capture file names using the capture filename configuration graphical user interface 400. For example, the usermay input one or more capture file names by activating (e.g., clickingon) the “Submit Capture File Name(s)” button using an input device.

FIG. 5 illustrates an exemplary screen shot of a filter configurationgraphical user interface 500, in accordance with exemplary embodiments.In an exemplary embodiment, the filter configuration graphical userinterface 500 may be arranged as depicted in FIG. 5. The filterconfiguration graphical user interface 500 may display to a user one ormore filter parameter data fields. In various embodiments, the user mayinput a filter parameter that may be used to reduce the amount of datatraffic captured and/or analyzed to produce protocol analysis data. Invarious embodiments, the user may filter data traffic based on one ormore source or destination IP addresses, one or more source ordestination Media Access Control (MAC) addresses, and/or one or moreprotocols. In various embodiments, the one or more protocols may includethe User Datagram Protocol (UDP), Hot Standby Router Protocol (HSRP),Address Resolution Protocol (ARP), browser protocol, Bootstrap Protocol(BOOTP), Domain Name System (DNS) protocol, Spanning-Tree Protocol(STP), and/or any other network communication protocol.

In an exemplary embodiment, the user may input one or more filterparameters into one or more filter parameter data fields using an inputdevice (e.g., a keyboard). For example, the user may input a firstfilter parameter into the filter parameter data field. In anotherexample, the user may input a second filter parameter into the filterparameter data field. In another example, the user may input a thirdfilter parameter into the filter parameter data field. In yet anotherexample, the user may input a fourth filter parameter into the filterparameter data field. In an exemplary embodiment, the user may input oneor more filter parameters using the filter configuration graphical userinterface 500. For example, the user may input one or more filterparameters by activating (e.g., clicking on) the “Submit CustomFilter(s)” button using an input device.

FIG. 6 illustrates an exemplary screen shot of a screen displaygraphical user interface 600, in accordance with exemplary embodiments.In an exemplary embodiment, the screen display graphical user interface600 may be arranged as depicted in FIG. 6. The screen display graphicaluser interface 600 may display to a user one or more screen displayoptions. For example, a screen display graphical user interface 600 mayenable a user to modify, view, and/or access one or more screen displayoptions, such as, screen formatting options.

In an exemplary embodiment, screen display options may include a pagelayout option, a page size option, a font color option, a font sizeoption, and/or a font type option. In various embodiments, the user mayactivate, select, and/or modify screen display options using an inputdevice (e.g., a mouse). For example, the screen display graphical userinterface 600 may display one or more page layout options (e.g.,landscape, portrait). In another example, the screen display graphicaluser interface 600 may display one or more page size options (e.g., 8.5in.×11 in., 11 in.×14 in.). In another example, the screen displaygraphical user interface 600 may display one or more font color optionsusing a drop down menu. In another example, the screen display graphicaluser interface 600 may display one or more font size options using adrop down menu. In yet another example, the screen display graphicaluser interface 600 may display one or more font type options using adrop down menu. In an exemplary embodiment, the user may input one ormore screen display parameters using the screen display graphical userinterface 600. For example, the user may input one or more screendisplay parameters (e.g., options) by activating (e.g., clicking on) the“Submit Screen Display Parameter(s)” button using an input device.

FIG. 7 illustrates an exemplary screen shot of a report graphical userinterface 700, in accordance with exemplary embodiments. In an exemplaryembodiment, the report graphical user interface 700 may be arranged asdepicted in FIG. 7. The report graphical user interface 700 may displayto a user one or more report parameter data fields. For example, thereport graphical user interface 700 may enable a user to generate,create, modify, view, and/or transmit a report based on real-time and/orstored protocol analysis data.

In an exemplary embodiment, the user may input one or more reportparameters into one or more report parameter data fields using an inputdevice (e.g., a keyboard). For example, the user may input a report typeparameter into the report generation data field. In another example, theuser may input a report transmission destination parameter into thereport transmission data field. In an exemplary embodiment, the user mayinput one or more report parameters using the report graphical userinterface 700. For example, the user may input one or more reportparameters by activating (e.g., clicking on) the “Submit ReportParameter(s)” button using an input device.

FIG. 8 illustrates an exemplary screen shot of an archived reports andcapture files graphical user interface 800, in accordance with exemplaryembodiments. In an exemplary embodiment, the archived reports andcapture files graphical user interface 800 may be arranged as depictedin FIG. 8. The archived reports and capture files graphical userinterface 800 may display to a user one or more archived report and/orarchived capture data fields. For example, the archived reports andcapture files graphical user interface 800 may enable a user to access,view, retrieve, and/or print one or more archived reports and/or one ormore archived capture files.

In an exemplary embodiment, the user may input one or more archivedreport and/or archived capture parameters into one or more archivedreport and/or archived capture data fields using an input device (e.g.,a keyboard). For example, the user may input the file name of a desiredarchived report into the archived report request data field. In anotherexample, the user may input the file name of a desired archived captureinto the archived capture request data field In an exemplary embodiment,the user may input one or more archived report and/or archived captureparameters using the archived reports and capture files graphical userinterface 800. For example, the user may input one or more archivedreport and/or archived capture file parameters by activating (e.g.,clicking on) the “Submit Archived Report and/or Archived Capture FileParameter(s)” button using an input device.

It should be noted that real-time (e.g., live) protocol analysis datamay be displayed to a user on a user system 122 running a graphical userinterface (e.g., a JAVA graphical user interface) and/or a web-basedapplet.

FIG. 9 illustrates a flowchart of a method 900 for simplifying protocolanalysis at a protocol analysis controller device 110, in accordancewith exemplary embodiments. This exemplary method is provided by way ofexample, as there are a variety of ways to carry out methods disclosedherein. The method 900 shown in FIG. 9 can be executed or otherwiseperformed by one or a combination of various networks and/or networkelements. The method 900 is described below as carried out by theprotocol analysis controller device 110 shown in FIG. 1 by way ofexample, and various elements of the simplified protocol analysisnetwork 100 are referenced in explaining the example method of FIG. 9.Each block shown in FIG. 9 represents one or more processes, methods, orsubroutines carried out in the exemplary method 900. Referring to FIG.9, the exemplary method 900 may begin at block 902.

In block 902, the method 900 may include receiving one or more requestmessages via the data network 108. In an exemplary embodiment, theprotocol analysis controller device 110 may receive one or more protocolanalysis request messages (e.g., one or more protocol analysis requestsignals) via data path 136. The protocol analysis request messages maybe based on protocol analysis request information inputted by one ormore users using user system 122. The method 900 may continue to block904.

In block 904, the method 900 may include transmitting one or morecontrol signals based on the one or more request messages. In anexemplary embodiment, the protocol analysis controller device 110 mayprocess the one or more protocol analysis request messages to determinethe one or more control signals. For example, one or more controlsignals may be based on one or more network interface configurationparameters, one or more capture file name parameters, and/or one or morefilter parameters indicated in the one or more protocol analysis requestmessages. In various embodiments, the protocol analysis controllerdevice 110 may transmit one or more control signals to one or moremulti-purpose interface devices 112 based on the one or more requestmessages. The method 900 may continue to block 906.

In block 906, the method 900 may include receiving protocol analysisdata. In an exemplary embodiment, the protocol analysis controllerdevice 110 may receive protocol analysis data from one or moremultipurpose interface devices via data path 140. The method 900 maycontinue to block 908.

In block 908, the method 900 may include storing protocol analysis data.In an exemplary embodiment, the protocol analysis controller device 110may store the protocol analysis data on one or more storage mediums,e.g., on the remote SAN 106, the database 104, and/or a local storagemedia (not shown) communicatively coupled to the protocol analysiscontroller device 110. The method 900 may continue to block 9 1 0.

In block 910, the method 900 may include outputting protocol analysisdata. In an exemplary embodiment, the protocol analysis controllerdevice 110 may output the protocol analysis data to the user system 122.For example, if a user requests real time (e.g., live) protocol analysisdata, the protocol analysis controller device 110 may transmit theprotocol analysis data directly to the user system 122 for display by adisplay device associated with the user system 122. The method 900 maythen end.

FIG. 10 illustrates a flowchart of a method 1000 for simplifyingprotocol analysis at a multipurpose interface device 112, in accordancewith exemplary embodiments. This exemplary method is provided by way ofexample, as there are a variety of ways to carry out methods disclosedherein. The method 1000 shown in FIG. 10 can be executed or otherwiseperformed by one or a combination of various networks and/or networkelements. The method 1000 is described below as carried out by themultipurpose interface device 112 shown in FIG. 1 by way of example, andvarious elements of the simplified protocol analysis network 100 arereferenced in explaining the example method of FIG. 10. Each block shownin FIG. 10 represents one or more processes, methods, or subroutinescarried out in the exemplary method 1000. Referring to FIG. 10, theexemplary method 1000 may begin at block 1002.

In block 1002, the method 1000 may include receiving one or more controlsignals via a network. In an exemplary embodiment, the multipurposeinterface device 112 may receive one or more control signals from one ormore protocol analysis controller devices 110 via data path 140. Themethod 1000 may continue to block 1004.

In block 1004, the method 1000 may include intercepting and/or capturingdata traffic transmitted on a test network 114 based on the one or morecontrol signals. In an exemplary embodiment, the multipurpose interfacedevice 112 may intercept and/or capture data traffic based on the one ormore control signals received from the one or more protocol analysiscontroller devices 10. The method 1000 may continue to block 1006.

In block 1006, the method 1000 may include analyzing the interceptedand/or captured data traffic based on the one or more control signals.In an exemplary embodiment, the multipurpose interface device 112 mayanalyze the intercepted and/or captured data traffic based on the one ormore control signals to produce protocol analysis data. The method 1000may continue to block 1008.

In block 1008, the method 1000 may include outputting the protocolanalysis data. In an exemplary embodiment, the multipurpose interfacedevice 112 may output the protocol analysis data to one or more protocolanalysis controller devices 110. In various embodiments, the protocolanalysis data may then be stored in one or more storage mediums and/oroutputted to one or more user systems 122. The method 1000 may then end.

It should be noted that the multipurpose interface devices 112 describedherein may be configured to be stationary devices or non-stationarydevices. The multipurpose interface devices 112 may be placed at variousnodes within a network, such as, a passive optical network (PON). Forexample, the multipurpose interface devices 112 may be placed at one ormore ingress points of a network and/or one or more egress points of anetwork.

In the preceding specification, various preferred embodiments have beendescribed with reference to the accompanying drawings. It will, however,be evident that various modifications and changes may be made thereto,and additional embodiments may be implemented, without departing fromthe broader scope of the invention as set forth in the claims thatfollow. The specification and drawings are accordingly to be regarded inan illustrative rather than restrictive sense.

1. A method, comprising: receiving, from a user system, one or moreprotocol analysis request messages via a network; transmitting, to oneor more multipurpose interface devices, one or more control signalsbased on the one or more protocol analysis request messages; receiving,from the one or more multipurpose interface devices, protocol analysisdata associated with data traffic transmitted on one or more testnetworks in response to the transmitted control signals; and outputting,to the user system, the protocol analysis data via the network.
 2. Themethod of claim 1, wherein the one or more protocol analysis requestmessages comprise protocol analysis request information.
 3. The methodof claim 1, further comprising processing the one or more protocolanalysis request messages to determine the one or more control signals.4. The method of claim 1, wherein the one or more control signalscomprise filter information.
 5. The method of claim 1, wherein the oneor more multipurpose interface devices comprise one or more protocolanalyzers.
 6. The method of claim 1, further comprising storing theprotocol analysis data in at least one of a database, local store media,and a remote storage area network (SAN) that are communicatively coupledto the network.
 7. The method of claim 1, wherein the outputted protocolanalysis data is based on real-time data.
 8. The method of claim 1,wherein the outputted protocol analysis data is based on stored data. 9.The method of claim 1, wherein the network comprises a passive opticalnetwork.
 10. A computer readable media comprising code to perform theacts of the method of claim
 1. 11. A system, comprising: one or morestorage mediums for storing protocol analysis data; and a protocolanalysis controller device communicatively coupled to the one or morestorage mediums and a network, the protocol analysis controller deviceis configured to: receive, from a user system, one or more protocolanalysis request messages via the network; transmit, to one or moremultipurpose interface devices, one or more control signals based on theone or more protocol analysis request messages; receive, from the one ormore multipurpose interface devices, protocol analysis data associatedwith data traffic transmitted on one or more test networks in responseto the transmitted control signals; store the protocol analysis data inthe one or more storage mediums; and output, to the user system, theprotocol analysis data via the network.
 12. The system of claim 11,wherein the one or more protocol analysis request messages compriseprotocol analysis request information.
 13. The system of claim 11,wherein the protocol analysis controller device is further configured toprocess the one or more protocol analysis request messages to determinethe one or more control signals.
 14. The system of claim 11, wherein theone or more control signals comprise filter information.
 15. The systemof claim 11, wherein the one or more multipurpose interface devicescomprise one or more protocol analyzers.
 16. The system of claim 11,wherein the one or more storage mediums comprise at least one of adatabase, a local storage media, and a remote storage area network(SAN).
 17. The system of claim 11, wherein the outputted protocolanalysis data is based on real-time data.
 18. The system of claim 11,wherein the outputted protocol analysis data is based on stored data.19. The system of claim 11, wherein the network comprises a passiveoptical network.
 20. A method, comprising: receiving, from a usersystem, one or more protocol analysis request messages via a network;processing the one or more protocol analysis request messages todetermine one or more control signals; transmitting, to one or moremultipurpose interface devices, the one or more control signals based onthe one or more protocol analysis request messages; receiving, from theone or more multipurpose interface devices, protocol analysis dataassociated with data traffic transmitted on one or more test networks inresponse to the transmitted control signals; storing the protocolanalysis data in at least one of a database, local storage media, and aremote storage area network (SAN) that are communicatively coupled tothe network; and outputting, to the user system, the protocol analysisdata via the network.
 21. A computer readable media comprising code toperform the acts of the method of claim 20.